We are in the final stages of preparation for the full release of DNS Protection at the end of May, and the end of the EAP access at the end of June.
Your DNS Protection in Sophos Central will be unchanged and the service will be available throughout this process.
But as part of this release we will be switching to a new root certificate for our block pages. The new certificate will be available for download in Sophos Central at that time, but you may want to get ahead of the game to prepare your endpoint devices.
The new root certificate can be identified as follows:
The certificate details are included below, including the certificate itself in base64 encoded (PEM) format. Cut and paste the following text (including the lines -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----) into a text file and rename it as .pem or .crt. You can then install it or deploy it to your endpoints as you did with the previous certificate.
We recommend that you keep both certificates installed and trusted during the rollout period. Once the GA release is complete, you can safely remove the current certificate from any devices or applications where it has been installed.
In this screenshot, the current certificate is highlighted in red, and the green highlight shows how the new certificate will appear when installed.
New certificate details:
Subject name/Issued to: Sophos internet Protection Root CA
SHA1 thumbprint: F4:15:AE:F8:03:CE:13:AF:11:AD:14:FE:5D:38:F9:CF:2D:91:C6:CD
SHA256 thumbprint: 4D:DE:15:5A:54:E2:77:E4:34:F5:7E:60:60:7A:2D:AE:2D:AD:C9:F6:69:3D:D6:51:7B:E9:62:75:3A:0E:D3:E5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Download the new certificate as a .cer file: https://community.sophos.com/cfs-file/__key/communityserver-blogs-components-weblogfiles/00-00-00-01-10/Sophos-Internet-Protection-Root-CA.cer
Download the new certificate as a .pem file: https://community.sophos.com/cfs-file/__key/communityserver-blogs-components-weblogfiles/00-00-00-01-10/Sophos-Internet-Protection-Root-CA.pem